a Java verifier that will not let an applet execute until the verifier verifies that the applet does not violate certain rules; a Java class loader that treats applets originating remotely differently from those originating locally; and a Java security manager that controls access to resources such as files and network access.